Search Vulnerabilities

CubeCart: Authenticated Arbitrary File Upload to RCE in REST Files API

Grav: Low-privileged API users can create super-admin accounts via blueprint-upload

TextPattern CMS 4.8.7 Remote Code Execution via File Upload

e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload

Emlog: Remote Code Execution via Malicious Plugin Upload

Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url

CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Execution

Vvveb < 1.0.8.2 RCE via Media Upload Handler

Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload

funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload

code-projects BloodBank Managing System request_blood.php unrestricted upload

MindsDB Engine proc_wrapper.py exec unrestricted upload

Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform uploadH5Files unrestricted upload

crmeb_java Admin Upload UploadServiceImpl.java unrestricted upload

Sunnet｜CTMS and CPAS - Arbitrary File Upload

User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload

MacCMS Pro Plugin Installation add.html install unrestricted upload

Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload

code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload